Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6x5p-r76q-h5g9

Опубликовано: 01 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

EPSS

Процентиль: 28%
0.00354
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
nvd
2 дня назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

CVSS3: 7.5
debian
2 дня назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...

EPSS

Процентиль: 28%
0.00354
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-476